Medium
Security advisory
An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-5801
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:25 UTC · Revision 1
Source evidence
An error within the "LibRaw::unpack()" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.
osv:CVE-2018-5801
Complete source record
{
"id": "707aa39670ec1ef40e5a34a6f8e0fad86a2a08fcfcd75472da15bc2f89a57831",
"url": "https://osv.dev/vulnerability/CVE-2018-5801",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-5801",
"summary": "An error within the \"LibRaw::unpack()\" function (src/libraw_cxx.cpp) in LibRaw versions prior to 0.18.7 can be exploited to trigger a NULL pointer dereference.",
"evidence": "osv:CVE-2018-5801",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2018-5801",
"aliases": [
"CVE-2018-5801"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/libraw/libraw",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "8682ad204392b914ab1cc6ebcca9c27c19c1a4b4"
},
{
"fixed": "0df5490b985c419de008d32168650bff17128914"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:libraw:libraw:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "0.18.7"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "0df5490b985c419de008d32168650bff17128914"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"0.18.6",
"0.18.5",
"0.18.4",
"0.18.3",
"0.18.2",
"0.18.1",
"0.18.0",
"0.17.0",
"0.16.0",
"0.15.0",
"0.14.6",
"0.14.5",
"0.14.4",
"0.14.3",
"0.14.2",
"0.14.1",
"0.14.0",
"0.13.6",
"0.13.5",
"0.13.4",
"0.13.3",
"0.13.2",
"0.13.1",
"0.13.0",
"0.12.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-5801.json",
"vanir_signatures": [
{
"id": "CVE-2018-5801-016e6f33",
"digest": {
"length": 5488,
"function_hash": "161483585446594267200935247022503028262"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "src/libraw_cxx.cpp",
"function": "LibRaw::unpack"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-09a4c581",
"digest": {
"length": 243,
"function_hash": "160494918233589209001810960379427370094"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_thumb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-0d045d4e",
"digest": {
"length": 784,
"function_hash": "107028413891214520022767389805362151335"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "nikon_yuv_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-0e32219a",
"digest": {
"length": 243,
"function_hash": "160494918233589209001810960379427370094"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_thumb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-11aa2fe3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124352597106125194591251597623813245087",
"205284995094097582530856370968424278719",
"22988309875342170224409563331183752929",
"152524982112894191157422634430165024569",
"134314041729803709068108821152848661040",
"56826994616165192090472973610448379347",
"9335849157892235498825732050239788851",
"13895658195792164903745073899324943651",
"24466760082234887380727357519372869531",
"7426613730176305859336298852780303120",
"271838145860153652684670112833131013177",
"210342598399517506555949216805269868272",
"203918500306293612318249725421719062350",
"265278866704382827202670825729318647996",
"78951212272183871313650740983746536437",
"72040137193199700986915357609299583190",
"37207052900821485193484520787432001846",
"298406861113080713784553777104916175824",
"136969156965128291443653095736113578484",
"235407591583852246927127605934439653139",
"30196958699258018537772565469074963074",
"105579096636456265405734532937431786796",
"214014673505471298928868781745504967101",
"70545129739348577869896186898755704651",
"136425149642808564512258529105280230462",
"91400670279961731544970769829038102440",
"53067433816204783646723949955514109327",
"26187831458945772625088063865499582524",
"86590266928334755423253981495614712362",
"336103892140386112942258816375107482313",
"247961867312073565171760312702418044760",
"150240696824577948971417154241146358422",
"275284776873653422909872411440016382812",
"302841285493743931431551974456587418965",
"220916476889783483661247240454011667784",
"328767936967423010356050288127137669594"
]
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-141c8de0",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124352597106125194591251597623813245087",
"205284995094097582530856370968424278719",
"22988309875342170224409563331183752929",
"152524982112894191157422634430165024569",
"134314041729803709068108821152848661040",
"56826994616165192090472973610448379347",
"9335849157892235498825732050239788851",
"13895658195792164903745073899324943651",
"24466760082234887380727357519372869531",
"7426613730176305859336298852780303120",
"271838145860153652684670112833131013177",
"210342598399517506555949216805269868272",
"203918500306293612318249725421719062350",
"265278866704382827202670825729318647996",
"78951212272183871313650740983746536437",
"72040137193199700986915357609299583190",
"37207052900821485193484520787432001846",
"298406861113080713784553777104916175824",
"136969156965128291443653095736113578484",
"235407591583852246927127605934439653139",
"30196958699258018537772565469074963074",
"105579096636456265405734532937431786796",
"214014673505471298928868781745504967101",
"70545129739348577869896186898755704651",
"136425149642808564512258529105280230462",
"91400670279961731544970769829038102440",
"53067433816204783646723949955514109327",
"26187831458945772625088063865499582524",
"86590266928334755423253981495614712362",
"336103892140386112942258816375107482313",
"247961867312073565171760312702418044760",
"150240696824577948971417154241146358422",
"275284776873653422909872411440016382812",
"302841285493743931431551974456587418965",
"220916476889783483661247240454011667784",
"328767936967423010356050288127137669594",
"176396876015451459354376681188751172409",
"318702961172474298222340958907578471478",
"184431407562271806030802193190809065591",
"98958406534496180594480157156599910465",
"309056222066399524872352719555832460388",
"120241558432838573609845346608985953322",
"100850317300044172871758774077954143283",
"183165565249248235104004237473157430537"
]
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-1f261753",
"digest": {
"length": 926,
"function_hash": "258053693770198014831738181204152304597"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_c603_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-1fd64b0f",
"digest": {
"length": 1074,
"function_hash": "3973563765850600755684746521009306221"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "sinar_4shot_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-21d6837b",
"digest": {
"length": 1074,
"function_hash": "3973563765850600755684746521009306221"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "sinar_4shot_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-2637ed87",
"digest": {
"length": 243,
"function_hash": "160494918233589209001810960379427370094"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_thumb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-27decec8",
"digest": {
"length": 960,
"function_hash": "144737991149904957369473714665081941139"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "foveon_sd_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-3452aa7c",
"digest": {
"length": 4209,
"function_hash": "223246713781937134530843018339932879352"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_radc_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-3874ecfa",
"digest": {
"length": 687,
"function_hash": "15525495523015937544790174210825329364"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_rgb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-3fa51116",
"digest": {
"length": 2297,
"function_hash": "202245538503356998516944743852207703228"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "lossy_dng_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-45d5e015",
"digest": {
"length": 971,
"function_hash": "214421281184207399848919388196393537141"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_c330_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-4a69848a",
"digest": {
"length": 6015,
"function_hash": "197206491577376393885324085096235188381"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "src/libraw_cxx.cpp",
"function": "LibRaw::unpack"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-4b21475b",
"digest": {
"length": 4331,
"function_hash": "258645329150201233248176608017425116591"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_radc_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-53376f4d",
"digest": {
"length": 984,
"function_hash": "163787082309327837638368078428263567791"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_ycbcr_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-587fc859",
"digest": {
"length": 926,
"function_hash": "258053693770198014831738181204152304597"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_c603_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-5996e3df",
"digest": {
"length": 784,
"function_hash": "107028413891214520022767389805362151335"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "nikon_yuv_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-5ba1248b",
"digest": {
"length": 984,
"function_hash": "163787082309327837638368078428263567791"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_ycbcr_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-5e8678f9",
"digest": {
"length": 766,
"function_hash": "166522695552084176915600078489115597785"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "imacon_full_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-6e646bbe",
"digest": {
"length": 766,
"function_hash": "2862206903275483430271369263106098319"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "foveon_dp_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-6f8245f7",
"digest": {
"length": 971,
"function_hash": "214421281184207399848919388196393537141"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_c330_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-702a4096",
"digest": {
"length": 984,
"function_hash": "163787082309327837638368078428263567791"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_ycbcr_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-77b95003",
"digest": {
"length": 687,
"function_hash": "15525495523015937544790174210825329364"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_rgb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-7d1986c0",
"digest": {
"length": 784,
"function_hash": "107028413891214520022767389805362151335"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "nikon_yuv_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-8154be70",
"digest": {
"length": 4209,
"function_hash": "223246713781937134530843018339932879352"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_radc_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-849bf680",
"digest": {
"length": 687,
"function_hash": "15525495523015937544790174210825329364"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_rgb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-92a1ff03",
"digest": {
"length": 766,
"function_hash": "2862206903275483430271369263106098319"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "foveon_dp_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-9c16d055",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124352597106125194591251597623813245087",
"205284995094097582530856370968424278719",
"22988309875342170224409563331183752929",
"152524982112894191157422634430165024569",
"134314041729803709068108821152848661040",
"56826994616165192090472973610448379347",
"9335849157892235498825732050239788851",
"13895658195792164903745073899324943651",
"247624207005488849400082665816783079091",
"155139663208115011040635896716346474931",
"238631259715363634434111870035998372287",
"33321694872410304805578437759869438314",
"177469676614097623427955571059726029717",
"125500678768115905340447769577806592378",
"7426613730176305859336298852780303120",
"101524119203479658809510807642278449630",
"46483795846108957218451483728479491461",
"203918500306293612318249725421719062350",
"265278866704382827202670825729318647996",
"78951212272183871313650740983746536437",
"72040137193199700986915357609299583190",
"37207052900821485193484520787432001846",
"298406861113080713784553777104916175824",
"136969156965128291443653095736113578484",
"235407591583852246927127605934439653139",
"30196958699258018537772565469074963074",
"105579096636456265405734532937431786796",
"214014673505471298928868781745504967101",
"70545129739348577869896186898755704651",
"136425149642808564512258529105280230462",
"91400670279961731544970769829038102440",
"53067433816204783646723949955514109327",
"26187831458945772625088063865499582524",
"86590266928334755423253981495614712362",
"336103892140386112942258816375107482313",
"247961867312073565171760312702418044760",
"150240696824577948971417154241146358422",
"275284776873653422909872411440016382812",
"302841285493743931431551974456587418965",
"220916476889783483661247240454011667784",
"328767936967423010356050288127137669594",
"176396876015451459354376681188751172409",
"318702961172474298222340958907578471478",
"184431407562271806030802193190809065591",
"98958406534496180594480157156599910465",
"309056222066399524872352719555832460388",
"120241558432838573609845346608985953322",
"100850317300044172871758774077954143283",
"183165565249248235104004237473157430537"
]
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-a02e723a",
"digest": {
"threshold": 0.9,
"line_hashes": [
"292921357836884860105013238615803349359",
"307037411965088136983749293576076400084",
"43483054351564291780598603455924190391",
"339636120942977234911671384945116044918"
]
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "src/libraw_cxx.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-a5bd9383",
"digest": {
"length": 1074,
"function_hash": "3973563765850600755684746521009306221"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "sinar_4shot_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-b01b8886",
"digest": {
"length": 926,
"function_hash": "258053693770198014831738181204152304597"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_c603_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-b7a85c51",
"digest": {
"length": 2297,
"function_hash": "202245538503356998516944743852207703228"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "lossy_dng_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-b9262966",
"digest": {
"length": 971,
"function_hash": "214421281184207399848919388196393537141"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_c330_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-c3fa48de",
"digest": {
"length": 960,
"function_hash": "144737991149904957369473714665081941139"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "foveon_sd_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-c5572fcb",
"digest": {
"length": 766,
"function_hash": "166522695552084176915600078489115597785"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "imacon_full_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-c8f1654b",
"digest": {
"threshold": 0.9,
"line_hashes": [
"252836511816281551337412742381892112552",
"97817573362742954812293633274999613411",
"43483054351564291780598603455924190391",
"339636120942977234911671384945116044918"
]
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "src/libraw_cxx.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-c9900705",
"digest": {
"length": 784,
"function_hash": "107028413891214520022767389805362151335"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "nikon_yuv_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-cdb66e9a",
"digest": {
"length": 243,
"function_hash": "160494918233589209001810960379427370094"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_thumb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-d7470001",
"digest": {
"length": 2297,
"function_hash": "202245538503356998516944743852207703228"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "lossy_dng_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-db936243",
"digest": {
"length": 984,
"function_hash": "163787082309327837638368078428263567791"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_ycbcr_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-e14431df",
"digest": {
"length": 687,
"function_hash": "15525495523015937544790174210825329364"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_rgb_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-e2c0a69f",
"digest": {
"length": 2297,
"function_hash": "202245538503356998516944743852207703228"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "lossy_dng_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-e7137ad9",
"digest": {
"length": 4331,
"function_hash": "258645329150201233248176608017425116591"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_radc_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-e892d06a",
"digest": {
"length": 971,
"function_hash": "214421281184207399848919388196393537141"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp",
"function": "kodak_c330_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-ec879400",
"digest": {
"length": 1074,
"function_hash": "3973563765850600755684746521009306221"
},
"source": "https://github.com/libraw/libraw/commit/8682ad204392b914ab1cc6ebcca9c27c19c1a4b4",
"target": {
"file": "dcraw/dcraw.c",
"function": "sinar_4shot_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-f36288c1",
"digest": {
"length": 926,
"function_hash": "258053693770198014831738181204152304597"
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "dcraw/dcraw.c",
"function": "kodak_c603_load_raw"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2018-5801-f7cfda82",
"digest": {
"threshold": 0.9,
"line_hashes": [
"124352597106125194591251597623813245087",
"205284995094097582530856370968424278719",
"22988309875342170224409563331183752929",
"152524982112894191157422634430165024569",
"134314041729803709068108821152848661040",
"56826994616165192090472973610448379347",
"9335849157892235498825732050239788851",
"13895658195792164903745073899324943651",
"247624207005488849400082665816783079091",
"155139663208115011040635896716346474931",
"238631259715363634434111870035998372287",
"33321694872410304805578437759869438314",
"177469676614097623427955571059726029717",
"125500678768115905340447769577806592378",
"7426613730176305859336298852780303120",
"101524119203479658809510807642278449630",
"46483795846108957218451483728479491461",
"203918500306293612318249725421719062350",
"265278866704382827202670825729318647996",
"78951212272183871313650740983746536437",
"72040137193199700986915357609299583190",
"37207052900821485193484520787432001846",
"298406861113080713784553777104916175824",
"136969156965128291443653095736113578484",
"235407591583852246927127605934439653139",
"30196958699258018537772565469074963074",
"105579096636456265405734532937431786796",
"214014673505471298928868781745504967101",
"70545129739348577869896186898755704651",
"136425149642808564512258529105280230462",
"91400670279961731544970769829038102440",
"53067433816204783646723949955514109327",
"26187831458945772625088063865499582524",
"86590266928334755423253981495614712362",
"336103892140386112942258816375107482313",
"247961867312073565171760312702418044760",
"150240696824577948971417154241146358422",
"275284776873653422909872411440016382812",
"302841285493743931431551974456587418965",
"220916476889783483661247240454011667784",
"328767936967423010356050288127137669594"
]
},
"source": "https://github.com/libraw/libraw/commit/0df5490b985c419de008d32168650bff17128914",
"target": {
"file": "internal/dcraw_common.cpp"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:30:47Z"
}
}
],
"modified": "2026-10-20T13:30:47.592414085Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2018:3065",
"https://github.com/LibRaw/LibRaw/blob/master/Changelog.txt",
"https://lists.debian.org/debian-lts-announce/2019/03/msg00036.html",
"https://secuniaresearch.flexerasoftware.com/advisories/79000/",
"https://secuniaresearch.flexerasoftware.com/secunia_research/2018-1/",
"https://usn.ubuntu.com/3615-1/",
"https://github.com/LibRaw/LibRaw/commit/0df5490b985c419de008d32168650bff17128914"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "14.04"
},
{
"last_affected": "14.04"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "17.10"
},
{
"last_affected": "17.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-5801",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387764,
"published_at": "2018-12-07T22:29:00.52+00:00"
}